I have installed Let's Encrypt SSL. Can I use cloudflare with it?

2

I use Let’s Encrypt behind CloudFlare as well, works without any problems.

Two things you should know:

  • If you’re currently using tls-sni-01 to verify domain ownership (that’s the default for the apache plugin, as an example), that won’t work behind CloudFlare and you’ll have to switch to http-01. You might want to look at this thread for some details.
  • CloudFlare is a reverse proxy, so your TLS sessions are (necessarily) no longer end-to-end-encrypted, meaning CloudFlare (or any adversary that has owned CloudFlare) could read your traffic.

Make sure to use the Full SSL (strict) option in CloudFlare as well, so that CloudFlare only accepts valid and trusted certificates from your backend server.

1 Like